The contract that governs your use of PhishNet. Please read it before signing up — it covers account responsibilities, billing, acceptable use, and the limits of what we promise.
These Terms of Service ("Terms") are a legal agreement between you and PhishNet, Inc. ("PhishNet", "we", "us"). By creating an account, installing the PhishNet extension, or using the PhishNet service in any other way, you agree to these Terms and to our Privacy Policy.
If you are using PhishNet on behalf of an organization, you represent that you have authority to bind that organization to these Terms, and "you" includes that organization.
If you do not agree to these Terms, do not use PhishNet.
PhishNet is an AI-assisted email-security tool that scans emails inside Gmail and Outlook, scores them for phishing risk, and surfaces explanations and recommended actions. The service includes:
We continuously improve PhishNet. We may add, change, or remove features with reasonable notice. We will not materially reduce a feature you are paying for during a billing period without offering a refund or comparable replacement.
Subject to your compliance with these Terms and (for paid plans) payment of fees, we grant you a limited, non-exclusive, non-transferable, revocable licence to access and use PhishNet for your own internal email-security purposes.
This licence does not transfer ownership. The PhishNet name, logo, software, and underlying scoring models remain ours.
You agree not to:
We may change pricing for new billing periods with at least 30 days' notice. Changes do not apply to a billing period you have already paid for.
Email content we process belongs to you (or to the people who sent it to you). We do not claim ownership. You grant us a limited licence to process that content solely to provide the service — see the Privacy Policy for the specifics.
We will not train any machine-learning model on your individual emails without your explicit, separate consent.
On termination, your access ends and your data is purged on the schedule described in the Privacy Policy.
PhishNet uses machine learning and heuristic rules to score emails. No automated system detects every threat — false negatives (missed phishing) and false positives (legitimate email flagged) are inherent limitations of the technology. PhishNet is one layer in a defence-in-depth strategy and is not a substitute for user vigilance, employee training, or other security controls. We do not guarantee that any specific phishing email, malware, or social-engineering attempt will be identified.
We are not liable for any harm resulting from a missed detection, including financial loss, credential theft, data breach, or business interruption that follows from a user interacting with an email PhishNet did not flag as malicious.
To the maximum extent permitted by law, neither party will be liable to the other for indirect, incidental, special, consequential, or punitive damages, or for lost profits, revenues, or data.
Our total aggregate liability arising out of or relating to these Terms or the service will not exceed the greater of (a) the fees you paid us in the 12 months before the event giving rise to liability, or (b) US $100.
Some jurisdictions do not allow exclusion of certain warranties or limitation of liability; those exclusions and limitations apply only to the extent the law permits.
You agree to defend, indemnify, and hold harmless PhishNet, Inc. and its officers, directors, employees, contractors, and agents from and against any claims, damages, losses, liabilities, costs, and expenses (including reasonable attorneys' fees) arising out of or relating to:
We reserve the right to assume exclusive control of the defence of any matter subject to indemnification by you, at your expense. You agree to cooperate fully and not to settle any such claim without our prior written consent.
We may update these Terms from time to time. We will notify you of material changes by email or in-product at least 30 days before they take effect. Continued use of PhishNet after the effective date means you accept the updated Terms; if you do not accept them, cancel your account before the effective date.
These Terms are governed by the laws of the State of Delaware, without regard to conflict-of-laws rules. Subject to the arbitration clause below, you consent to the exclusive jurisdiction of the state and federal courts located in Wilmington, Delaware for any dispute not subject to arbitration, except where applicable consumer-protection law grants you the right to sue in your home jurisdiction.
Nigerian operations. PhishNet operates from Nigeria. Where Nigerian law is mandatory — including the Nigeria Data Protection Act 2023 (NDPA), the Federal Competition and Consumer Protection Act 2018 (FCCPA), and the Cybercrimes (Prohibition, Prevention, etc.) Act 2015 — those provisions apply to our Nigerian operations and users and take precedence over these Terms to the extent of any conflict. Nothing in these Terms limits any right you have under Nigerian mandatory consumer-protection or data-protection law.
Informal resolution. Before initiating any formal proceeding, you agree to contact us at legal@phishnet.ai and attempt in good faith to resolve the dispute informally for at least 30 days. We will do the same before bringing any claim against you.
Binding arbitration. If informal resolution fails, any dispute, claim, or controversy arising out of or relating to these Terms, the Privacy Policy, or the service — including questions about the validity or enforceability of this clause — will be resolved by binding individual arbitration. Users in Nigeria may elect arbitration under the Nigerian Arbitration and Mediation Act 2023, seated in Lagos, Nigeria. All other users will arbitrate under the American Arbitration Association ("AAA") Consumer Arbitration Rules, in English, in Wilmington, Delaware (or remotely if both parties agree). The arbitrator's award is final, binding, and may be entered as a judgment in any court of competent jurisdiction. Either party may seek emergency injunctive relief in court solely to preserve the status quo pending arbitration.
If the class-action waiver above is found unenforceable for a particular claim, that claim must proceed in court rather than arbitration, with the rest of this section remaining in effect. Nothing in this section limits either party's right to seek injunctive relief in court for infringement of intellectual property rights.